Do not trust any mate, if you’re in need of which exchange to purchase bitcoin from then I will recommend a decentralized exchange which you can easily get from list here on https://kycnot.me/, once you purchase your bitcoin you move them to your personal wallet. You don’t need to be scared of managing your own wallet all you need to do is to understand how it works, security comes at a price and this price is acquiring the knowledge. As for the choice of an hardware wallet it is a good choice but I will advise against Ledger wallets due to policy issues rather go for wallets like passports or Trezor self. But before going in full make sure you have experiment it with a little amount.
I am also more of a fan of airgapped wallet than regular hardware wallets but I wouldn’t recommend it to a total newbie like him, because the set up and other process can easily have mistakes which would just compromise the wallet. But rather he should go for an open source hardware wallet at least should there be any changes to that wallet policy the tech savvy guys could spot it out easily
I also feel like the attack on this individuals or exchanges is like a direct attack to the cryptocurrency community except if it is case like SBF’s, although they themselves are cony with their centralized protocols but I will rather pitch a tent with them than the government. One thing is once you don’t meet their regulation requirements then the SEC (government per se) will come fully for you.